greenart7c3 d43cacdeb7 Update rustls to 0.23.46 in the built-in Tor engine ...

Clears all four open Dependabot alerts against rustls 0.23.45 in
tools/arti (ECH rejection leaking buffered application data, unauthenticated
ServerHello key-exchange poisoning, session Debug formatting exposing master
secrets and resumption PSKs, and unbounded Brotli certificate-decompression
memory before authentication). The lock also re-wires tempfile and the
strum-dependent crate to the syn 3 and getrandom 0.3 versions cargo kept
when pruning.

All nine native libraries are rebuilt from this one source and lock:
four Android ABIs, desktop Linux x64/arm64, Windows x64, and both macOS
flavors (the macOS dylibs came out of the amber-macos VM, rustup and the
pinned 1.98.1 toolchain installed there).

2026-10-29 14:08:06 -03:00

4.2 MiB

Executable File

Raw Permalink History

View Raw